[Starlingx-discuss] Migrate Starling X kernel patches to LTS kernel
Hi team I am a new user/developer of starling X and after searching into the kernel metapatches at: https://git.starlingx.io/cgit/stx-integ/tree/kernel Some questions came to me : As far as I can see we are under kernel 3.10 from RHEL RT fork right? There are some ( actually many ) security and functional changes that exist in the LTS kernel ( like 4.19 as an example), because of that I would like to use a more stable kernel into my starling x system Is there any specific reason why use that specific for from RHEL? What does starling X think about the migration of these patches ( some of them are already applied into the latest versions of Linux Kernel)? What kind of test should I perform to check that my vanilla kernel + STX patches work as expected? All feedback is more than welcome BTW thanks to Mario and Saul for the help on understand more these patches Regards Victor Rodriguez
There are two kernels, standard and rt. Both are centos 7.5 based with a small set of patches applied on top along with modified kernel config options. Not quite understanding what you are asking. Are you proposing to replace the kernel in the starlingX project or just in your local environment ? What is the objective here ? Brent -----Original Message----- From: Victor Rodriguez [mailto:vm.rod25@gmail.com] Sent: Tuesday, November 20, 2018 9:20 PM To: starlingx-discuss@lists.starlingx.io Subject: [Starlingx-discuss] Migrate Starling X kernel patches to LTS kernel Hi team I am a new user/developer of starling X and after searching into the kernel metapatches at: https://git.starlingx.io/cgit/stx-integ/tree/kernel Some questions came to me : As far as I can see we are under kernel 3.10 from RHEL RT fork right? There are some ( actually many ) security and functional changes that exist in the LTS kernel ( like 4.19 as an example), because of that I would like to use a more stable kernel into my starling x system Is there any specific reason why use that specific for from RHEL? What does starling X think about the migration of these patches ( some of them are already applied into the latest versions of Linux Kernel)? What kind of test should I perform to check that my vanilla kernel + STX patches work as expected? All feedback is more than welcome BTW thanks to Mario and Saul for the help on understand more these patches Regards Victor Rodriguez _______________________________________________ Starlingx-discuss mailing list Starlingx-discuss@lists.starlingx.io http://lists.starlingx.io/cgi-bin/mailman/listinfo/starlingx-discuss
On Tue, Nov 20, 2018 at 8:25 PM Rowsell, Brent <Brent.Rowsell@windriver.com> wrote:
There are two kernels, standard and rt. Both are centos 7.5 based with a small set of patches applied on top along with modified kernel config options.
Thanks for the clarification
Not quite understanding what you are asking. Are you proposing to replace the kernel in the starlingX project or just in your local environment ?
For my local environment. I would not like to use CentOS kernel 3.10 but instead LTS 4.19
What is the objective here ?
To have a more stable and secure kernel on my production system, there are security fixes that would like to have on my kernel that LTS provides I know RHEL/CentOS is based on kernel 3.10 but other OSs are ot like ubuntu/debian/fedora Regards
Brent
-----Original Message----- From: Victor Rodriguez [mailto:vm.rod25@gmail.com] Sent: Tuesday, November 20, 2018 9:20 PM To: starlingx-discuss@lists.starlingx.io Subject: [Starlingx-discuss] Migrate Starling X kernel patches to LTS kernel
Hi team
I am a new user/developer of starling X and after searching into the kernel metapatches at:
https://git.starlingx.io/cgit/stx-integ/tree/kernel
Some questions came to me :
As far as I can see we are under kernel 3.10 from RHEL RT fork right? There are some ( actually many ) security and functional changes that exist in the LTS kernel ( like 4.19 as an example), because of that I would like to use a more stable kernel into my starling x system
Is there any specific reason why use that specific for from RHEL?
What does starling X think about the migration of these patches ( some of them are already applied into the latest versions of Linux Kernel)?
What kind of test should I perform to check that my vanilla kernel + STX patches work as expected?
All feedback is more than welcome
BTW thanks to Mario and Saul for the help on understand more these patches
Regards
Victor Rodriguez
_______________________________________________ Starlingx-discuss mailing list Starlingx-discuss@lists.starlingx.io http://lists.starlingx.io/cgi-bin/mailman/listinfo/starlingx-discuss
Victor, Brent: There are a couple of things not mentioned that I have heard talked about on both sides of this discussion. My understanding is that the kernel version is based on the RHEL/CentOS version as it's a known tested combination at the Distro level, even though there are patches to the kernel and user-space. On the other side, the 3.10 RHEL kernel (with all the RHEL patches) may not address all the known CVEs, so there is a concern about overall security. Intel is looking at the newer kernel and porting the StarlingX patches (as needed) for the Clear and Multi-OS parts of the project. The overall question becomes can StarlingX take the 4.19LTS kernel as a newer base kernel for the project, it reduces the overall patch load and address some security issues. I believe you understand these objectives. Sau! On 11/20/18 6:42 PM, Victor Rodriguez wrote:
On Tue, Nov 20, 2018 at 8:25 PM Rowsell, Brent <Brent.Rowsell@windriver.com> wrote:
There are two kernels, standard and rt. Both are centos 7.5 based with a small set of patches applied on top along with modified kernel config options.
Thanks for the clarification
Not quite understanding what you are asking. Are you proposing to replace the kernel in the starlingX project or just in your local environment ?
For my local environment. I would not like to use CentOS kernel 3.10 but instead LTS 4.19
What is the objective here ?
To have a more stable and secure kernel on my production system, there are security fixes that would like to have on my kernel that LTS provides
I know RHEL/CentOS is based on kernel 3.10 but other OSs are ot like ubuntu/debian/fedora
Regards
Brent
-----Original Message----- From: Victor Rodriguez [mailto:vm.rod25@gmail.com] Sent: Tuesday, November 20, 2018 9:20 PM To: starlingx-discuss@lists.starlingx.io Subject: [Starlingx-discuss] Migrate Starling X kernel patches to LTS kernel
Hi team
I am a new user/developer of starling X and after searching into the kernel metapatches at:
https://git.starlingx.io/cgit/stx-integ/tree/kernel
Some questions came to me :
As far as I can see we are under kernel 3.10 from RHEL RT fork right? There are some ( actually many ) security and functional changes that exist in the LTS kernel ( like 4.19 as an example), because of that I would like to use a more stable kernel into my starling x system
Is there any specific reason why use that specific for from RHEL?
What does starling X think about the migration of these patches ( some of them are already applied into the latest versions of Linux Kernel)?
What kind of test should I perform to check that my vanilla kernel + STX patches work as expected?
All feedback is more than welcome
BTW thanks to Mario and Saul for the help on understand more these patches
Regards
Victor Rodriguez
_______________________________________________ Starlingx-discuss mailing list Starlingx-discuss@lists.starlingx.io http://lists.starlingx.io/cgi-bin/mailman/listinfo/starlingx-discuss
_______________________________________________ Starlingx-discuss mailing list Starlingx-discuss@lists.starlingx.io http://lists.starlingx.io/cgi-bin/mailman/listinfo/starlingx-discuss
Saul, This is a big change. I suggest adding it to the next TSC call. Brent -----Original Message----- From: Saul Wold [mailto:sgw@linux.intel.com] Sent: Wednesday, November 21, 2018 12:11 PM To: Victor Rodriguez <vm.rod25@gmail.com>; Rowsell, Brent <Brent.Rowsell@windriver.com> Cc: starlingx-discuss@lists.starlingx.io Subject: Re: [Starlingx-discuss] Migrate Starling X kernel patches to LTS kernel Victor, Brent: There are a couple of things not mentioned that I have heard talked about on both sides of this discussion. My understanding is that the kernel version is based on the RHEL/CentOS version as it's a known tested combination at the Distro level, even though there are patches to the kernel and user-space. On the other side, the 3.10 RHEL kernel (with all the RHEL patches) may not address all the known CVEs, so there is a concern about overall security. Intel is looking at the newer kernel and porting the StarlingX patches (as needed) for the Clear and Multi-OS parts of the project. The overall question becomes can StarlingX take the 4.19LTS kernel as a newer base kernel for the project, it reduces the overall patch load and address some security issues. I believe you understand these objectives. Sau! On 11/20/18 6:42 PM, Victor Rodriguez wrote:
On Tue, Nov 20, 2018 at 8:25 PM Rowsell, Brent <Brent.Rowsell@windriver.com> wrote:
There are two kernels, standard and rt. Both are centos 7.5 based with a small set of patches applied on top along with modified kernel config options.
Thanks for the clarification
Not quite understanding what you are asking. Are you proposing to replace the kernel in the starlingX project or just in your local environment ?
For my local environment. I would not like to use CentOS kernel 3.10 but instead LTS 4.19
What is the objective here ?
To have a more stable and secure kernel on my production system, there are security fixes that would like to have on my kernel that LTS provides
I know RHEL/CentOS is based on kernel 3.10 but other OSs are ot like ubuntu/debian/fedora
Regards
Brent
-----Original Message----- From: Victor Rodriguez [mailto:vm.rod25@gmail.com] Sent: Tuesday, November 20, 2018 9:20 PM To: starlingx-discuss@lists.starlingx.io Subject: [Starlingx-discuss] Migrate Starling X kernel patches to LTS kernel
Hi team
I am a new user/developer of starling X and after searching into the kernel metapatches at:
https://git.starlingx.io/cgit/stx-integ/tree/kernel
Some questions came to me :
As far as I can see we are under kernel 3.10 from RHEL RT fork right? There are some ( actually many ) security and functional changes that exist in the LTS kernel ( like 4.19 as an example), because of that I would like to use a more stable kernel into my starling x system
Is there any specific reason why use that specific for from RHEL?
What does starling X think about the migration of these patches ( some of them are already applied into the latest versions of Linux Kernel)?
What kind of test should I perform to check that my vanilla kernel + STX patches work as expected?
All feedback is more than welcome
BTW thanks to Mario and Saul for the help on understand more these patches
Regards
Victor Rodriguez
_______________________________________________ Starlingx-discuss mailing list Starlingx-discuss@lists.starlingx.io http://lists.starlingx.io/cgi-bin/mailman/listinfo/starlingx-discuss
_______________________________________________ Starlingx-discuss mailing list Starlingx-discuss@lists.starlingx.io http://lists.starlingx.io/cgi-bin/mailman/listinfo/starlingx-discuss
participants (3)
-
Rowsell, Brent
-
Saul Wold
-
Victor Rodriguez